Add documentation of HTTP password configuration for REST API

Change-Id: I2a9d0e50978334e560e076791029746f2531ea51